Lucene search

K
cve[email protected]CVE-2007-2671
HistoryMay 14, 2007 - 11:19 p.m.

CVE-2007-2671

2007-05-1423:19:00
web.nvd.nist.gov
24
mozilla
firefox
2.0.0.3
denial of service
application crash
nvd

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

9.1 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access.

Affected configurations

NVD
Node
mozillafirefoxMatch2.0.0.3

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

9.1 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%